Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B1BD7/6E7BF640E54911EF87332F61762E951A/58A4F560E54E11EF908E0F81762E951A.roa
File: 58A4F560E54E11EF908E0F81762E951A.roa (raw, json)
Hash identifier: RGKTeSXUz+Sp60GwrTqbGbFazRAHGX0bbtXYfxY2Mws=
Subject key identifier: 19:19:35:C0:2D:4C:81:61:21:A1:2E:8C:39:A0:16:3F:BE:FA:1E:D1
Certificate issuer: /CN=F36B1BD7AF/serialNumber=FDF07004D507E3169F8F04CC2ED8E0BBF4AADFC6
Certificate serial: 07
Authority key identifier: FD:F0:70:04:D5:07:E3:16:9F:8F:04:CC:2E:D8:E0:BB:F4:AA:DF:C6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_fBwBNUH4xafjwTMLtjgu_Sq38Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B1BD7/6E7BF640E54911EF87332F61762E951A/58A4F560E54E11EF908E0F81762E951A.roa
Signing time: Fri 07 Feb 2025 12:23:33 +0000
ROA not before: Fri 07 Feb 2025 12:23:29 +0000
ROA not after: Wed 07 Feb 2035 12:23:29 +0000
asID: 329314
IP address blocks: 102.211.100.0/22 maxlen: 24
2c0f:1740::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B1BD7AF
Validity
Not Before: Feb 7 12:23:29 2025 GMT
Not After : Feb 7 12:23:29 2035 GMT
Subject: CN=67a5fb45-8871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:48:bb:63:99:35:61:f9:0a:ff:77:08:48:45:
83:8b:d5:81:5b:17:a8:70:95:d3:91:fc:a7:3c:3e:
e0:1e:d5:fc:f1:36:46:1a:4a:1a:6c:00:c0:7b:93:
dc:bf:5d:5d:da:33:af:8f:ff:49:e6:1b:c2:2a:02:
af:96:a9:e5:d8:89:14:c8:0d:76:18:9a:4f:fc:00:
59:28:4a:19:06:ef:05:30:d9:b4:cf:f3:3e:e5:18:
ee:6b:2e:f0:4d:d8:b2:90:a3:6e:b3:3b:75:7f:82:
56:1f:30:a4:29:a6:9b:7c:7b:96:d9:07:6a:74:a9:
51:49:55:2b:6a:f4:f0:ce:fe:1e:a5:35:e7:d8:6c:
e5:c6:f6:78:31:92:f3:4b:88:cf:07:85:7d:ad:31:
f0:0f:c6:e5:47:46:db:1b:3b:74:59:a1:ad:a0:28:
16:07:71:e4:d8:10:de:8e:e6:be:08:e8:66:50:d5:
4f:20:b2:84:99:34:9d:c9:f8:b1:5e:10:58:d9:88:
4e:eb:2a:91:56:30:89:b6:8c:bb:f0:e4:a6:d2:78:
01:a2:1c:ac:39:61:71:e7:4d:8f:a3:af:f1:5a:ea:
f0:ee:bd:22:b9:03:9b:a4:f1:c6:04:3c:44:42:d9:
1e:e2:42:9e:ae:8b:2b:29:bb:0f:2c:1f:3f:fd:76:
55:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:19:35:C0:2D:4C:81:61:21:A1:2E:8C:39:A0:16:3F:BE:FA:1E:D1
X509v3 Authority Key Identifier:
keyid:FD:F0:70:04:D5:07:E3:16:9F:8F:04:CC:2E:D8:E0:BB:F4:AA:DF:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1BD7/6E7BF640E54911EF87332F61762E951A/_fBwBNUH4xafjwTMLtjgu_Sq38Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_fBwBNUH4xafjwTMLtjgu_Sq38Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1BD7/6E7BF640E54911EF87332F61762E951A/58A4F560E54E11EF908E0F81762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.211.100.0/22
IPv6:
2c0f:1740::/32
Signature Algorithm: sha256WithRSAEncryption
76:ab:c0:eb:9e:44:a5:d1:7f:bc:d7:b3:11:2a:5a:d1:1e:8a:
95:43:7a:d0:20:0b:2d:b1:f6:48:7e:4f:21:ab:98:eb:f5:3e:
46:76:0f:fd:0e:f3:3c:ad:b0:54:df:73:32:6e:83:d3:3a:5b:
41:cd:ac:76:3b:db:80:c4:30:2a:00:a0:41:a0:d7:02:be:78:
78:cb:1c:52:4f:56:00:4b:e6:83:31:86:e0:1e:8d:89:d3:5c:
c1:1a:b6:60:8e:20:13:47:94:db:33:27:8c:17:b2:88:ac:fb:
2f:77:4f:04:34:49:f5:f7:4c:67:de:4f:2d:c0:e2:29:1f:6f:
51:1f:49:46:40:d3:1f:48:e1:1f:8e:a4:0a:7d:fc:99:4c:c8:
53:2b:ee:e8:31:a7:ef:6b:fa:51:99:4d:92:45:ac:8d:b5:e2:
7d:24:80:4c:fa:88:1f:72:ca:17:78:a6:a0:cc:a8:a5:6d:20:
df:b4:c1:94:86:c0:5d:38:1c:58:08:1e:85:01:52:9d:3b:f5:
95:d0:3b:71:ad:16:a5:d6:c5:62:d5:78:31:47:21:38:93:3e:
ab:0e:4f:ce:c8:9b:1e:05:38:94:ed:a1:9d:d2:7b:85:44:6f:
9e:85:05:59:12:7b:6c:cb:25:fa:f8:9e:8a:46:46:e5:30:87:
4a:75:92:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:46 2025 by rpki-client